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PRECIS 

An  integrative  definition  and  model  of  state  suspicion  is  developed  by  reviewing  multiple  social 
science  disciplines.  Research  propositions  within  information  technology  (IT)  contexts  are 
derived. 
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1.0  SUMMARY 

1.1  Objective 

Review  and  integrate  available  researeh  about  the  eonstruet  of  state  -  level  suspieion  as  it 
appears  in  soeial  scienee  literatures.  Apply  the  resulting  findings  to  Information  Technology 
(IT)  contexts. 

1.2  Background 

Although  the  human  factors  literature  is  replete  with  articles  about  trust  (and  distrust)  in 
automation,  there  is  little  on  the  related,  but  distinct,  construct  of  “suspicion”  (either  in 
automated  or  IT  contexts).  The  construct  of  suspicion  -  its  precise  definition,  theoretical 
correlates,  and  role  in  such  applications  -  deserves  further  study. 

1.3  Method 

Literatures  that  consider  suspicion  are  reviewed  and  integrated.  Literatures  include 
communication,  psychology,  human  factors,  management,  marketing,  information  technology, 
and  brain/neurology.  We  first  develop  a  generic  model  of  state-  level  suspicion.  Research 
propositions  are  then  derived  within  IT  contexts. 

1.4  Results 

Fundamental  components  of  suspicion  include  (i)  uncertainty,  (ii)  increased  cognitive 
processing  (e.g.,  generation  of  alternative  explanations  for  perceived  discrepancies),  and  (iii) 
perceptions  of  (mal)intent.  State  suspicion  is  defined  as  the  simultaneous  occurrence  of  these 
three  components.  Our  analysis  also  suggests  that  trust  inhibits  suspicion  while  distrust  can  be 
a  catalyst  of  state-level  suspicion.  Based  on  a  three-stage  model  of  state-level  suspicion, 
associated  research  propositions  and  questions  are  developed.  These  propositions  and 
questions  are  intended  to  help  guide  future  work  on  the  measurement  of  suspicion  (self-report 
and  neurological),  as  well  as  the  role  of  the  construct  of  suspicion  in  models  of  decision¬ 
making  and  detection  of  deception. 

1.5  Conclusion 

The  study  of  suspicion,  including  its  correlates,  antecedents,  and  consequences,  is 
important.  We  hope  that  the  social  sciences  will  benefit  from  our  integrated  definition 
and  model  of  state  suspicion.  The  research  propositions  regarding  suspicion  in  IT 
contexts  should  motivate  substantial  research  in  human  factors  and  related  fields. 
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2.0  THE  CONSTRUCT  OF  STATE-LEVEL  SUSPICION:  A  MODEL  AND 
RESEARCH  AGENDA  FOR  AUTOMATED  AND  INFORMATION  TECHNOLOGY  (IT) 
CONTEXTS 

Suspicion  is  an  important,  yet  relatively  uninvestigated,  topic  in  the  social  sciences,  particularly 
in  technology-oriented  eontexts.  For  example,  suppose  a  drone  operator  is  monitoring  a 
computer  sereen  which  provides  a  visual  representation  of  what  is  being  seen  while  the  drone  is 
flying  in  a  remote  region  of  the  world.  If  the  information  gets  unusually  blurry,  does  the  operator 
become  suspieious  and  wonder  if  the  satellite  transmission  is  being  affeeted  by  solar  flares  or  if 
the  transmission  is  being  tracked  by  the  enemy?  Further,  assuming  the  transmission  is  indeed 
being  tracked  (and  possibly  even  purposively  distorted),  what  cues  might  lead  the  operator  to 
suspect  the  attaeker  has,  in  turn,  become  suspicious  that  others  are  aware  of  his  eovert  aetivities? 

Or,  imagine  an  individual  who  is  monitoring  electronie  transmissions  of  another  eomputer 
operator.  If  the  first  individual  sees  an  anomaly,  does  that  eause  him/her  to  be  suspicious?  At 
what  level  of  perceived  malintent  do  such  “triggers”  oecur?  And,  what  information  might  lead 
the  first  operator  to  “suspect”  that  the  second  operator  knows  he  or  she  is  being  monitored? 

When  “suspicion”  occurs,  what  is  the  psychological  state  of  that  first  operator?  What  emotional 
and  cognitive  responses  are  assoeiated  with  the  state  of  suspicion? 

Or,  imagine  an  analyst  (financial,  military,  etc.)  who,  during  a  work-related  task,  encounters  an 
untrustworthy  website  that  asks  for  personal  login  information.  At  what  point  does  s/he  beeome 
suspicious  and/or  follow  any  predefined  organizational  protocol  developed  for  these  malicious 
situations? 

In  this  review  and  analysis,  we  first  consider  the  general  construct  of  suspicion  -  a  construct  that, 
although  important,  is  associated  with  scant  academic  research.  Borrowing  from  the  trust  in 
automation  (and  related)  literature,  we  then  develop  a  heuristie  model  of  state-level  suspicion  in 
technologically  enhanced  environments.  A  framework  of  relevant  faetors,  research  propositions, 
research  questions,  and  future  needs  are  noted. 
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3.0  TOWARDS  A  LITERATURE-BASED  DEFINITION  OF  THE  CONSTRUCT  OF 
STATE-LEVEL  SUSPICION 

3,1  The  Social  Science  Literature  on  Suspicion 

We  reviewed  several  soeial  seienee  literatures  for  published  work  that  provided  definitions  of  the 
eoneept  of  “suspieion.”  Literatures  ineluded  psyehology  (personality  and  soeial  psyehology 
subfields),  human  faetors,  management,  information  seienee,  marketing,  information  teehnology, 
and  politieal  seienee  (ineluding  eonfliet  resolution).  We  found  minimal  literature  on  suspieion. 
Some  of  the  definitions  were  about  state  suspieion  (e.g.,  Fein,  1996;  Lyons  et  ah,  2011),  some 
were  about  more  generalized  dispositional  suspieion  (e.g..  Buss  &  Durkee,  1957,  or  Levine  & 
MeCornaek,  1991  who  had  both  types),  and  some  artieles  did  not  make  this  distinetion. 

Although  we  borrow  eoneeptual  issues  from  all  of  this  work,  we  foeus  attention  on  state 
suspieion,  beeause  our  resulting  model  is  about  the  transient  state  (ef  Bond  &  Lee,  2005) 
indueed  by  IT  interaetions. 

The  minimal  work  (often  in  soeial  psyehology)  was  only  sometimes  useful.  For  example,  some 

artieles  would  diseuss  suspieion  as  a  eentral  variable  in  their  study  without  defining  it  (e.g., 

Ferrin  &  Dirks,  2003,  in  management;  Hoffman,  2007,  in  politieal  seienee;  Vonk,  1998  in  soeial 

psyehology;  Yoon,  Guran-Canli,  &  Sehwartz,  2006,  in  marketing).  If  definitions  were  provided, 

they  were  sometimes  of  questionable  use  (e.g.,  Deutseh,  1958,  or,  in  eonfliet  management.  Buss 
1 

&  Perry,  1992). 

However,  some  artieles  provided  more  guidanee  regarding  eomponents  of  the  suspicion 
construct,  and  they  are  summarized  in  Table  1.  They  led  to  some  convergences  in  our  analysis 
(see  the  common  attributes  of  uncertainty,  malintent,  and  cognitive  activity  earmarked  in  Table 
1),  although  we  note  that  there  was  no  single,  consistent  conceptual  definition  of  the  construct  of 
suspicion  in  the  prior  literature  (as  previously  noted  by  Levine  &  McComack,  1991).  We 
summarize  this  literature,  and  the  entries  in  Table  1,  by  discussing  the  three  common 
components  of  suspicion  that  lead  to  our  integrative  definition  of  state  suspicion. 


Deutseh  is  an  oft-cited  early  researcher  in  this  domain.  His  definition  of  suspicion  is  “an  individual  may  be 
said  to  be  suspicious  of  the  occurrence  of  an  event  if  the  disconfirmation  of 

the  expectation  of  the  event’s  occurrence  is  preferred  to  its  confirmation  and  if  the  expectation  of  its  occurrence 
leads  to  behavior  which  is  intended  to  reduce  its  negative  motivational  consequences”  (p.  267). 
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Table  1:  Definitions  of  Suspicion  from  Social  Science  Literatures 


Social  Psychology 

Hilton,  Fein,  and  Miller  (1993)  define  suspieion  as  having  two  eomponents  of  “questioning 
motives”  and  being  in  a  state  of  “suspended  judgment”  (p.  502).  Suspicious  perceivers  “suspend 
their  judgments  until  they  are  able  to  determine”  which  alternative  is  accurate  (p.  504).  It  is  also 
noted  that  suspicion  increases  cognitive  load.  Uncertainty  (Un),  Cognitive  Activity  (CA) 

Fein  (1996)  defines  suspicion  as  “a  dynamic  state  in  which  the  individual  actively  entertains 
multiple,  plausibly  rival  hypotheses  about  the  motive  or  genuineness  of  a  person’s  behavior” 

(Fein,  1996,  p.  1165).  The  author  also  suggests  that  suspicion  additionally  implies  that  the 
“other”  person  (i.e.,  the  actor)  is  hiding  something  or  discrediting  the  meaning  of  behavior.  Un, 

CA,  Mal-Intent  (MI) 

Sinaceur  (2010)  adopts  Fein’s  definition  of  suspicion  in  dyadic,  negotiation  contexts  (i.e., 
consideration  of  plausible,  rival  hypotheses  about  another’s  motives).  Notes  that  suspicion  is 
more  than  uncertainty  because  of  the  additional  cognitions  about  underlying  motives,  although 
the  motives  can  be  both  positive  and  negative.  Un,  CA. 

Echebarria-Echabe  (2010)  defines  suspicion  as  “the  preventive  attitude  of  receptors  towards  a 
message  because  they  think  that  it  contains  biased  or  hidden  interests  and  involves  some  attempt 
at  manipulation”  (p.  148).  Un,  MI 

Marketing  (and  Consumer  Psychology) 

Campbell  and  Kirmani  (2000)  adopt  Eein’s  (1996)  definition.  Un,  CA,  MI 

DeCarlo  (2005)  defines  suspicion  (of  motives)  as  a  “questioning”  (p.  239)  of  motives  that 
underlie  another’s  behavior.  The  role  of  cognitive  arousal  is  also  noted.  Un,  CA 

Consulting  Psychology 

Buss  and  Durkee  (1957)  define  suspicion  as  .  projection  of  hostility  on  to  others.  This  varies 
from  merely  being  distrustful  and  wary  of  people  to  beliefs  that  others  are  being  derogatory  or 
are  planning  harm.”  In  follow-up  work  (Buss  &  Perry,  1992),  “suspicion”  and  “resentment” 
items  loaded  on  the  same  factor.  MI 

Management 

Grant  and  Hofmann  (201 1)  define  suspicion  as  “questioning  the  motives  or  the  sincerity  of 
behavior”  (ftnte.  2).  Un,  MI 

Communication 

Buller  and  Burgoon  (1996)  define  suspicion  as  “a  belief,  held  without  sufficient  evidence  or 
proof  to  warrant  certainty,  that  a  person’s  speech  or  actions  may  be  duplicitous.”  (p.  205)  Un, 

MI. 
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Table  1:  Definitions  of  Suspicion  from  Social  Science  Literatures  (Continued) 


Levine  and  McComack  (1991)  define  trait  suspicion  as  “a  predisposition  toward  believing  that 
the  messages  produced  by  others  are  deceptive”;  state  suspicion  is  “a  belief  that  communication 
within  a  specific  setting  and  at  a  particular  time  may  be  deceptive”  (p.  328).  They  also  note  that 
suspicion  invokes  active  information  processing.  Un,  CA,  ML 

Human  Factors 


Lyons  et  al.  (2011)  define  suspicion  as  “the  degree  of  uncertainty  one  has  when  interacting 
with  a  particular  stimulus,”  and  they  note  that  suspicion  is  associated  with  tension  and 
cognitive  processing.  Un,  CA 

Olson  (2009)  defines  suspicion  as  “user  perceptions  that  the  direction,  duration,  and  intensity  of 
an  IT  systems  unexpected  behavior  will  negatively  impact  their  task”  [sic].  Un,  MI 

3,2  The  Characteristic  of  Uncertainty 

The  factor  of  “uncertainty”  appears  as  a  key  facet  of  several  definitions  of  suspicion.  In  social 
psychology,  Hilton,  Fein,  and  Miller’s  (1993)  review  of  the  role  of  suspicion  in  making 
inferences  suggests  that  suspicious  individuals  ^'suspend  their  judgments  [italics  added  for 
emphasis]  until  they  are  able  to  determine”  which  alternative  is  accurate  (p.  504).  A  similar 
follow-up  definition  by  Fein  (1996)  was  also  adopted  by  Sinacuer  (2010)  in  his  studies  on 
suspicion  in  two-person  negotiation  scenarios,  as  well  as  by  Campbell  and  Kirmani  (2000)  in 
their  marketing  and  consumer  behavior  studies.  This  suspension  of  judgment  is  consistent  with 
the  presence  of  uncertainty.  If  individuals  were  more  certain  (i.e.,  below  some  threshold  of 
uncertainty)  they  might  be  more  prone  to  making  decisions  instead  of  waiting.  Also  in  social 
psychology,  Echebarria-Echabe  (2010)  studied  students’  suspicions  when  processing  persuasive 
arguments;  his  definition  included  an  implied  uncertainty  by  students  (as  well  as  a  concern  about 
motives  and  intent). 

In  marketing,  DeCarlo  (2005)  studied  students’  suspicion  of  salespersons,  which  was  defined  as 
a  “questioning”  (p.  239)  of  the  salesperson’s  motives;  hence  uncertainty  is  again  implied.  In 
management.  Grant  and  Hofmann  (2011)  studied  the  reception  of  an  ideological  message  in 
organizations  as  a  function  of  the  characteristics  of  the  message  sender.  They  hypothesized 
receiver  suspicion  as  a  mediating,  explanatory  variable  for  their  findings,  and  they  defined 
suspicion  as  “questioning  the  motives  or  the  sincerity  of  behavior”  (p.  175).  A  similar  definition 
appears  in  the  communication  literature.  Eor  example,  Buller  and  Burgoon  (1996)  define 
suspicion  as  “a  belief,  held  without  sufficient  evidence  or  proof  to  warrant  certainty,  that  a 
person’s  speech  or  actions  may  be  duplicitous”  (p.  205).  Einally,  in  human  factors,  Eyons  et  al. 
(2011)  define  suspicion  as  “the  degree  of  uncertainty  one  has  when  interacting  with  a  particular 
stimulus”  (p.  220)  which,  in  their  study,  was  a  computer  system  that  included  an  automated  tool. 

Thus,  uncertainty  is  likely  an  important  component  in  the  definition  of  suspicion.  We 
underscore  the  “an”  because  this  factor  does  not,  by  itself,  define  suspicion.  Eor  example,  one 
can  be  uncertain  about  how  to  operate  a  software  application  (due  to  inexperience),  yet  not 
necessarily  be  suspicious  about  it. 
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3.3 


The  Characteristic  of  MI 


In  the  literature -based  definitions  of  suspieion,  attributions  about  the  intent  of  an  external  agent 
emerged  as  another  important  component.  For  example,  in  social  psychology,  Fein  (1996) 
mentions  an  attribution  about  the  “genuineness”  of  a  person’s  behavior.  He  also  notes  that 
suspicion  implies  that  the  “other”  person  is  hiding  something  or  discrediting  the  meaning  of 
behavior.  Or,  in  Echebarria-Echabe’s  (2010)  study  of  persuasive  arguments,  suspicion  is  defined 
as  “the  preventive  attitude  of  receptors  towards  a  message  because  they  think  that  it  contains 
biased  or  hidden  interests  and  involves  some  attempt  at  manipulation”  (p.  148).  In  management. 
Grant  and  Hofiman  (2011)  use  the  phrase  “questioning  the  motives”;  in  communication,  Buller 
and  Burgoon  (1996)  mention  that  “a  person’s  speech  or  actions  may  be  duplicitous.” 

Also,  we  incorporate  “mal”  in  the  notion  of  “intent”  -  thereby  giving  suspicion  a  negative  cast  - 
because  almost  every  article  about  suspicion  assumed  the  potential  for  harm  and  negative 

outcomes,  particularly  in  cyber  contexts.  However,  suspicion  is  more  general,  in  that  it  can  also 

2 

have  a  positive  cast  (e.g.,  “I  suspect  my  family  is  planning  a  surprise  birthday  party  for  me”). 

3,4  The  Characteristic  of  Cognitive  Activation 

Several  literatures  suggest  another  important  component  of  suspicion;  i.e.,  a  substantial  increase 
in  cognitive  load  when  in  a  state  of  suspicion  (see  Bond,  2012  or  Patterson,  2009,  for  some 
markers  of  cognitive  load,  such  as  inhibition,  loss  of  working  memory,  reduced  processing 
speed,  reduced  sensory  functioning,  excess  body  movement,  or  decreased  eye  blinking).  Eor 
example,  Eein’s  (1996)  social  psychological  review  and  definition  of  suspicion  included  the 
cognitive  generation/consideration  of  multiple  plausible,  rival  hypotheses  for  observed 
behavior.  He  notes  research  support  for  such  increased  cognitive  activity  (p.  1167).  In 
adopting  Eein’s  definition  in  negotiation  contexts,  Sinaceur  (2010)  also  notes  associated 
increases  in  cognition. 

In  the  communication  literature,  Eevine  and  McCornack  (1991,  p.  328)  suggest  that  suspicion 
leads  individuals  to  “more  actively  process”  incoming  information.  In  DeCarlo’s  (2005) 
marketing  study,  he  suggests  that  suspicion  increases  “sophisticated  attributional  thought 
processes”  (p.  239).  And,  in  the  Eyons  et  al.  (2010)  study  on  information  technology,  it  is 
suggested  that  suspicion  is  associated  with  increased  cognition  (e.g.,  more  information  search 
tactics). 

In  summary,  the  construct  of  suspicion  involves  uncertainty  about  someone’s  (or  something’s) 
behavior.  This  uncertainty  is  also  related  to  attributions  of  possible  intent  -  and  often  malintent, 
concerns  about  being  harmed,  etc.  Being  in  a  state  of  suspicion  also  involves  increased 
cognitive  activity  and  load,  because  the  actor  (the  suspicious  person)  is  actively  engaged  in 
collecting  data  about  another’s  motives  or  cognitively  generating  alternative  explanations  for  the 
observed  behavior  (cf  Campbell  &  Kirmani,  2000;  DeCarlo,  2005;  Eein,  1996;  Eevine  & 
McCornack,  1991;  Eyons  et  ah,  2011).  Also,  as  suggested  above,  none  of  these  components  by 
themselves  are  sufficient  for  generating  increased  (or  reduced)  states  of  suspicion. 


We  also  note  that  in  positive  instances  involving  suspicion,  the  uncertainty  is  enjoyable  (e.g.,  party  giving;  what  song  a  dj  is 
going  to  play  next).  Indeed,  in  management  contexts,  entrepreneurs  might  enjoy  the  uncertainty  and  risk  associated  with  business 
ventures,  as  well  as  attempts  to  unpack  suspicions  about  their  competitors  (cf.  LeFevre,  Matheny,  &  Kolt,  2003,  who  discuss 
occupational  stress  and  the  concept  of  positive  stress,  or  eustress).  However,  the  negative  instances  associated  with  suspicion 
(e.g.,  “I  suspect  that  person  might  be  trying  to  do  me  harm  and  might  be  acting  intentionally  deviously”;  “I  am  suspicious  of  the 
information  being  given  me  by  the  automated  read-ouf’)  are  more  fundamentally  related  to  the  cyber  focus  of  this  review. 
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For  example,  one  ean  be  uneertain,  yet  not  suspieious,  about  tomorrow’s  weather;  eonversely,  as 
noted  by  a  reviewer,  one  can  be  certain  that  an  external  agent  is  an  enemy  and  has  strong 
malintent,  yet  still  be  suspicious  of  any  observed  behavior  on  that  agent’s  part.  Thus,  it  is  the 
simultaneous  combination  of  uncertaintv,  nerceived  (mal)intent,  and  cognitive  activitv 

3 

(searching  for  alternative  explanations  or  new  data)  that  define  state  suspicion. 

3.5  State  Suspicion  in  Information  Technology  (IT)  Contexts 

IT  contexts  might  involve  electronic  input! coWQCiion  of  data  (e.g.,  cataloging  consumer 
purchases;  determining  the  length  of  response  time  on  a  computer  display)  or  automated 
throughput! analysis  of  such  data  (e.g.,  encoding,  summarization,  or  interpretation  via  computer 
algorithms).  IT  contexts  might  also  involve  output  such  as  decision  making  (e.g.,  offering 
alternative  solutions  to  potential  aircraft  conflicts;  generating  potential  preferences/rankings  of 
possible  troop  movements)  or  electronic  implementation  of  courses  of  action  (e.g.,  generating 
automatic  replies  to  customer  queries).  This  summary  is  similar  to  the  four  purposes  of 
automation  noted  by  Lee  and  See  (2004,  citing  Parasuraman  et  ah,  2000);  i.e.,  information 
acquisition,  information  analysis,  decision  selection,  and  action  implementation.  Thus,  we 
define  state  suspicion  in  IT  contexts  as: 

State  suspicion  in  IT  contexts  is  a  person ’s  simultaneous  state  of  cognitive  activity,  uncertainty, 
and  perceived  malintent  about  underlying  information  that  is  being  electronically  generated, 
collated,  sent,  analyzed,  or  implemented  by  an  external  agent. 

The  “external  agent”  in  this  definition  could  be  another  person,  a  collection  of  individuals  (e.g.,  a 
business  organization  or  political  group),  or  an  inanimate  object  (e.g.,  a  computer  or  an 
information  system).  For  example,  in  our  reading  of  the  trust  and  automation  literature,  the 
concept  of  agent  sometimes  referred  to  (i)  the  operator  of  the  IT  system,  (ii)  the 
programmer/designer  of  the  IT  system,  (iii)  the  programmer/developer  of  the  algorithms  used  in 
the  software,  (iv)  the  software  itself  (without  reference  to  the  programmer,  as  in  Bisantz  & 

Seong,  2001),  (v)  the  hardware  in  the  system,  (vi)  the  entire  IT  system  (or  perhaps  linked  mini¬ 
systems  as  in  Buhler  &  Huhns,  2001),  or  (vii)  the  organization  that  is  using  the  system  (cf. 

Bobko,  2012).  In  our  model,  we  suggest  that  an  individual  might  have  state  suspicion  about  any 
of  these  agents. 

3.6  Towards  a  Process-Based  Model  of  Suspicion 

In  the  application  of  trust  to  IT,  Gefen,  Benbasat,  and  Pavlou  (2008)  have  noted  a  need  for  a 
conceptual  framework  to  guide  research.  Thus,  with  our  focus  on  IT  suspicion,  we  also  develop 
a  three-stage  process  model  of  state-level  IT  suspicion. 

As  noted,  there  is  a  dearth  of  literature  directly  related  to  the  definition,  causes,  and  consequence 
of  suspicion  in  IT  contexts.  The  field  is  ripe  for  future  research,  and  based  on  our  review, 
analysis,  and  model  (graphically  depicted  in  Figure  1),  we  offer  some  formal  propositions.  We 
offer  “research  propositions”  when  the  underlying  theory  appears  sufficient  to  suggest  a  direction 
of  effect  for  the  underlying  variables,  as  well  as  “exploratory  research  questions”  when  the 
literature  is  less  well-specified. 

In  statistical  terminology,  this  definition  implies  a  three-way  interaction  between  cognitive  activity, 
uncertainty,  and  malintent. 


7 

Distribution  A.  Approved  for  public  release;  distribution  unlimited. 
88ABW-2014-0406;  Cleared  07  February  2014 


STAGE  1: 

Missing 

Pattern  of  Negative 

System  &  Interface 

cues 

Information 

Discrepancv 

Characterlstcs 

*-  * 


STAGE  II; 
filters 


STAGE  III: 


immediate 

derivatives 

and 

outcomes 


Trust  1  1  Distrust  Training/Rewards  Individual  Differences 

11 

1 

SUSPICION 

(uncertainty  x  cognitive  activity  xmalintent) 

1  n creased  Cognitive  Load 

Emotional  Arousal 

1  1 

1 

1  Fear  |  |  Anxiety 

Stress  Correlates(slck,  heartbeat,  etc) 

N  e  u  r  0 1  ogi  cal  I  nd  i  otors 


Detection  of  Decepton 


S  e  CO  n  darv  Ta  sk  Pe  rf  or  man  oe 


Figure  1:  Stages  of  State-Level  IT  Suspicion 
3,7  Suspicion  Stage  I:  Cues  in  the  IT  Environment 

Cues  in  the  environment  can  act  as  a  “trigger”  of  state-level  suspicion  (over  and  above  baseline 
levels  of  trait  suspicion,  or  tendency  to  be  suspicious,  noted  in  stage  II).  The  Stage  I  cues 
include; 

•  pattern  of  negative  discrepancies 

•  missing  information 

•  system  and  interface  characteristics 

To  generate  relatively  more  specific  cues,  we  used  literature  on  decision  making  and  missing 
information,  as  well  as  neurological  literature.  We  also  borrowed  from  the  trust  in  automation 
literature  because  (i)  there  is  currently  minimal  literature  on  IT  suspicion  and  (ii)  the  trust  in 
automation  literature  sometimes  parallels  our  analysis  of  the  general  suspicion  literature.  For 
example,  many  trust  in  automation  articles,  almost  by  definition,  assume  that  the  external  agent 
does  not  have  to  be  an  individual,  but  could,  in  fact,  be  an  automated  system  or  other 

Second,  articles  in  the  trust  in  automation  literature  implicitly  note  the  role  of  uncertainty 
(although  the  focus  is  uncertainty  reduction)  in  their  models  (Jarvenpaa  &  Leidner,  1999;  Lee  & 
See,  2004;  Lyons  et  ah,  2011;  McKnight,  Choudhury,  &  Kacmar,  2002;  Xu  et  ah,  2007).  Third, 
Lee  and  See  (2004,  p.  76)  note  that  trust  applies  in  automated  situations  —  where  uncertainty  and 
complexity  make  an  exhaustive  evaluation  of  options  impractical.  This  relates  to  our  notion  that 
suspicion  involves  a  generation  of  alternatives. 

In  summary.  Table  2  delineates  and  categorizes  factors  which  likely  apply  as  Stage  I  cues  to  our 
state-level  suspicion  process.  Based  on  finding  in  the  literature,  we  expanded  the  missing 
information  category  to  include  incomplete  or  clarifying  information;  the  discrepancy  category 
was  also  enhanced,  to  include  reliability  and  validity.  Associated  research  citations  are 
provided. 
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Table  2:  Possible  Input  Factors  at  Stage  1  of  tbe  State  Suspicion  Process 

(based  on  Figure  1) 


MISSING,  INCOMPLETE,  OR  CLARIFYING  INFORMATION 

Capacity  to  observe  performance  of  the  system  (Lee  &  See,  2004) 

Explanation/understandability  of  the  algorithms  and  operations  and  their  intent;  clarity  of 
benefit  of  automation  (Lee  &  See,  2004;  Lyons  et  ah,  201 1;  Merritt  &  Ilgen,  2008,  eiting 

Muir,  1994;  Parasuraman  &  Riley,  1997) 

Specificity  of  system  information  (e.g.,  information  support  or  speeifie  recommendation; 
see  Parasuraman  &  Manzey’s,  2010,  review  p.  396  or  Metzger  et  ah,  2010) 

Information  pereeived  as  missing  (Ebenbaeh  &  Moore,  2000). 

Structural  assurances  (e.g.,  on  a  web  site  or  system  confidence  information)  (McKnight  et 
ah,  2002;  Parasuraman  &  Manzey,  2010,  although  not  supported  in  Wang  &  Benbasat, 

2008)  and  branding  alliances  (Lowry  et  ah,  2008) 

Willingness  of  persons  in  an  electronic  social  system  to  provide  personal  information 
(Ridings,  Gefen,  &  Arinze,  2002) 

Whether  the  information  is  focused  on  positive  feedback  (all  systems  working)  or  focused  on 
negatives  (warnings);  Lee  and  See  (2004)  note  individuals  are  more  eautious  in  the  latter 
condition 

PATTERN  OF  NEGATIVE  DISCREPANCIES,  RELIABILITY,  AND  VALIDITY 

The  patterns  across  time  of  failures  in  the  system  (Bisantz  &  Seong,  2001);  for  example,  framing 
effects  due  to  initial  expeetations  (Lee  &  See,  2004) 

Normality  of  the  organizational  strueture  and/or  technical  situation,  or  assurances  thereof  (Li  et 
ah,  2008) 

Reliability  and  predictability  of  software  being  used  (Jarvenpaa  &  Leidner,  1999,  for  predietable 
oommunieation;  Lee  &  See,  2004;  Lyons  et  ah,  2011;  Parasuraman  &  Riley,  1997) 

Reliability  of  hardware  being  used  (Bailey  &  Seerbo,  2007,  citing  Lee  &  Moray,  1992;  Merritt  & 
Ilgen,  2008) 

Integrity  of  the  software’s  algorithms  (matching  to  values  of  the  user,  Huhns  &  Buell,  2002;  see 
also  Lee  &  See’s,  2004,  notion  of  “value  congruenee”) 

Reputation  of  the  system  or  vendor  (Li  et  ah,  2008;  MeKnight  et  ah,  2002) 

Accountability  of  the  operator  (cf  Parasuraman  &  Manzey’s,  2010,  discussion  of  work  by 

Mosier  and  colleagues) 

Accuracy  or  competence  of  the  software  being  used  (Huhns  &  Buell,  2002;  Lyons  et  ah,  2011; 
Merritt  &  Ilgen,  2008,  citing  Lee  &  Moray,  1992;  Parasuraman  &  Riley,  1997) 
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Table  2:  Possible  Input  Factors  at  Stage  1  of  tbe  State  Suspicion  Process  (Continued) 


ENVIRONMENTAL  CUES  VIA  USER  INTERFACE 

Correspondence  of  visual  interface  with  the  actual  environment  being  simulated  (Bisantz  & 

Seong,  2001) 

Whether  or  not  the  interface  is  audiovisual,  audio  only,  or  text  only  (Burgoon,  Blair,  &  Strom, 
2005);  it  was  found  that  truth  bias  was  strongest  in  the  audiovisual  condition,  but  type  of 
interface  did  not  influence  the  accuracy  of  deception  detection 

Use  of  instant  messaging  in  a  running  history,  static  format  or  just  the  current  communication  in 
a  real-time  format  (Zhou  &  Zhang,  2007) 

Etiquette  (e.g.,  patience  versus  interruption)  and  politeness  of  any  voice  used  (Parasuraman  & 
Miller,  2004) 

Timing  of  responses  (Jarvenpaa  &  Leidner,  1999;  Lee  &  See,  2004;  Ridings,  Gefen,  &  Arinze, 
2002) 

Use  of  real  pictures,  good  colors,  and  provision  of  a  physical  address  when  web  sites  are  being 
used  (Lee  &  See,  2004) 

Ease  of  use  of  a  web  site  (“site  quality”  in  McKnight  et  ah,  2002;  navigability,  spelling,  grammar 
in  Metzger  et  ah,  2010) 

Use  of  instructive  tone  of  voice  versus  informational  tone  (Cramer  et  ah,  2008);  the  instructive 
agent  was  perceived  as  more  competent  although  this  was  moderated  by  user  locus  of  control 

Matching  of  the  emotion  of  any  system  voice  with  emotion  of  the  user  (Nass  et  ah,  2005) 

MISCELLANY 

Time  constraints  (Parasuraman  &  Riley,  1997) 

Task  complexity  (Parasuraman  &  Riley,  1997;  Bailey  &  Scerbo,  2007) 
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For  example,  regarding  diserepaneies  as  eues,  and  eonsistent  with  the  “uneertainty”  eomponent, 
state-level  suspicion  might  be  increased  because  of  a  mismatch  between  what  is  being  perceived 
and  what  one  expects.  When  operating  a  normally  fast  computer,  a  slow  session  might  lead  to  a 
perceived  discrepancy  in  expected  speed,  as  well  as  generation  of  subsequent  explanations  (not 
enough  RAM;  malware;  being  monitored,  etc.).  Indeed,  Oliveira,  McDonald,  and  Goodman’s 
(2007)  neurological  study  supports  this  notion.  They  suggest  that  any  discrepancies  (positive  or 
negative)  between  observation  and  expectation  will  be  associated  with  increased  anterior 
cingulate  cortex  activity  -  an  indicator  of  increased  need  for  cognition  and  use  of  external 
information. 

Missing  information  is  another  possible  environmental  cue  (via  uncertainty  and  malintent)  that 
increases  state  suspicion.  In  their  marketing  study,  Johnson  and  Levin  (1985)  note  that  missing 
information  is  related  to  a  reduction  in  predicted  satisfaction  (hence  concern)  with  the  potential 
purchase  of  a  television.  They  note  that  missing  information  is  particularly  salient  when  the 
missing  attribute  is  negatively  correlated  with  other  attributes.  Indeed,  these  authors  suggest  that 
missing  information  induces  “suspicion”  (undefined).  Other  social  science  literature  also 
supports  the  idea  that  missing  information  causes  a  devaluation  of,  or  concern  about,  the  focal 
object  (e.g.,  Ebenbach  &  Moore,  2000,  regarding  environmental  decisions  about  waste  facility 
sites;  Jagacinski,  1991,  regarding  personnel  selection  of  hypothetical  job  candidates). 

As  an  example  of  system  and  interface  cues  (our  third  category  of  Stage  I  variables),  we  note  that 
the  correspondence  of  actual  and  simulated  environments,  as  well  as  ease  of  use  of  software,  may 
reduce  IT-induced  suspicion  (Bisantz  &  Seong,  2001;  McKnight  et  al,  2002).  Conversely,  audio- 
only  or  text-only  interfaces  may  increase  suspicion  relative  to  audiovisual  interfaces  (Burgoon  et 
al,  2005). 

The  entries  in  Table  2,  and  our  model  in  Figure  1,  lead  to  our  first  two  sets  of  “research 
propositions”  for  Stage  I: 

•  Proposition  1. 1 :  A  pattern  of  negative  discrepancies  between  observed  behavior 
by  an  external  agent  and  predicted  behavior  of  that  agent  will  increase  the 
observer’s  (user’s)  state-level  suspicion.  It  may  also  be  that  a  single  discrepancy 
will  have  the  same  effect  if  the  discrepancy  is  sufficiently  large  and  harmful.  In 
addition,  missing  information  (external  systems  not  responding  completely;  visual 
or  audio  input  is  impaired;  etc.)  will  increase  the  user’s  level  of  state  suspicion. 

•  Proposition  1.2:  Regarding  cues  and  the  characteristics  of  IT  system  or 
situational  attributes,  state-level  IT  suspicion  will  decrease  (1)  when  there  is  a 
good  correspondence  between  the  visual  interface  and  the  actual  environment 
being  simulated,  (2)  when  there  is  a  capacity  to  observe  performance  of  the 
system  (either  in  terms  of  reliability  or  accuracy),  (3a)  when  structural 
assurances  about  the  system  integrity  and  purpose  are  provided  or  (3b)  when 
there  is  an  explanation  about  the  system’s  capabilities  or  purpose,  (4)  when 
system  feedback  is  focused  on  systems  working  normally  rather  than  feedback 
about  potential  negative  events,  (5)  when  system  etiquette  or  politeness  is  high, 

(6)  when  responses  are  timely,  (7)  when  system-based  decisions  are  presented  in 
a  clear  manner,  (8)  when  the  task  is  complex  (in  that  complexity  reduces 
monitoring),  and  (9)  when  the  user  generally  perceives  that  the  surrounding 
organization  structure  is  normal.  (See  Table  2  for  specific  citations,  supporting 
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studies,  and  other  possible  influential  cues.)  Conversely,  levels  of  state-level  IT 
suspicion  will  increase  as  the  above  factors  become  less  prevalent  or  otherwise 
violate  user  expectations  about  the  IT  system. 

We  also  suggest  that  Stage  I  determinants  of  state-level  IT  suspicion  may  be  bypassed  (directly 
to  Stage  III)  by  simply  telling  individual  users  to  “be  suspicious.”  We  consider  this  possibility 
in  the  discussion  section,  when  we  note  the  need  for  research  on  the  development  of  training 
programs. 

A  few  “exploratory  research  questions”  (offered  when  the  literature  is  not  as  well-  specified) 
about  Stage  I  can  also  be  generated.  We  hope  they  motivate  future  research,  as  well: 

•  Exploratory  research  questions  1. 1  (multivariate  modeling):  Mathematical  models  of 
the  simultaneous  operation  of  the  multiple  factors  in  Table  2  should  be  investigated. 
For  example,  consider  two  system  precursors  of  suspicion  from  the  above  listings, 
i.e.,  explanation  of  system  purpose  (Xl)  and  physical  representation  of  the 
simulated  environment  (X2).  If  Xl  and  X2  are  both  positive,  then  presumably  state 
suspicion  is  reduced.  However,  suppose  Xl  is  positive  but  X2  is  negative.  Do 
these  factors  “cancel  out”  in  the  prediction  of  suspicion  (i.e.,  an  additive  model)? 

Or,  if  either  one  of  the  variables  is  negative,  will  state  suspicion  be  induced  (i.e.,  an 
interactive  model  where  if  any  variable  is  negative,  this  overrides  all  positive 
factors)?  And,  if  the  cues  are  all  related  to  suspicion  in  the  same  direction,  which 
cues  are  more  salient  (more  heavily  weighted)  than  others?  To  increase  the 
interactive  complexity,  perhaps  these  models  vary  as  a  function  of  the  individual 
difference  moderators  (catalysts  and  inhibitors)  in  Stage  II. 

•  Exploratory  research  questions  I.2a  (negative  events  and  framing):  Research 
should  consider  how  user  behaviors  are  influenced  by  the  pattern  of  previous 
successes  and  failures  when  interacting  with  specific  IT  systems.  This  notion 
might  involve  an  application  of  the  literature  on  cognitive  heuristics  (e.g., 
framing  and  anchoring)  in  human  decision  making  (Metzger  et  ah,  2010;  Tversky 
&  Kahneman,  1981).  Such  factors  occasionally  appear  in  the  trust  in  automation 
literature  (e.g..  Fee  &  See,  2004  for  framing).  For  example,  although  the  two 
statements  are  arithmetically  equivalent,  does  informing  a  user  that  a  system 
works  95%  of  the  time  have  different  effects  than  informing  a  user  that  the 
system  fails  5%  of  the  time?  Intuitively,  the  latter  frame  (perhaps  any  negative 
frame  about  reliability  and  accuracy)  may  induce  more  suspicion.  Conversely,  an 
argument  could  be  made  for  the  opposite  effect;  i.e.,  perhaps  knowing  that  failure 
is  occasionally  a  possibility  may  lead  to  less  suspicion  of  the  system  because 

4 

failure  is  a  familiar  outcome. 


This  latter  possibility  is  analogous  to  classic  reinforcement  theory  and  the  notion  that  behavior  is  more  difficult  to 
extinguish  after  variable  ratio  reinforcement  (Reynolds,  1968).  That  is,  under  variable  ratio  reinforcement,  one 
learns  that  an  event  (in  this  case  a  failure/event)  occasionally  occurs,  so  behavior  (attitude  toward  the  system)  does 
not  extinguish  even  when  the  data  indicate  otherwise. 
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•  Exploratory  research  question  L2b  (negative  events  and  their  magnitude):  Research 
should  also  consider  how  the  salience/importance  of  any  failure  influences  the 
above  processes.  For  example,  if  the  failures  that  occur  5%  of  the  time  are  each 
“small  losses,”  is  suspicion  reduced  due  to  “minor”  failures  being  familiar? 
Conversely,  there  might  be  some  threshold  of  failure  importance,  beyond  which 
suspicion  is  aroused,  regardless  of  prior  experiences.  We  expect  levels  of  this 
threshold  to  be  correlated  with  individual  differences  as  presented  in  Stage  II.  For 
example,  an  experienced  computer  user  might  quickly  notice,  and  become 
suspicious  about,  a  negative  event,  while  a  novice  computer  user  might  more 
readily  blame  him  or  herself  in  the  presence  of  IT  system  failures,  even  if  the 
system  failures  are  substantial. 

•  Exploratory  research  questions  1.3  (subliminal  cues).  We  encourage  research  on 
the  subliminal  manipulation  of  cues  listed  in  Table  2.  For  example,  if  a  user  is  in  a 
high  state  of  suspicion,  will  subliminal  messages  on  the  user’s  screen  (e.g.,  a 
subliminal  display  of  the  phrase  “all  is  well”)  override  any  self-reported  suspicion 
or  physiological/neurological  measures?  Will  behaviors  focused  on  deception 
detection  be  reduced?  There  is  support  in  the  general  literature  for  the  influence  of 
subliminal  messages  (cf.  Mlodinow,  2012  for  a  review).  For  example,  MacCrea  et 
al.  (1994)  found  that  subjects’  use  of  stereotyping  could  be  manipulated 
subliminally.  To  the  extent  use  of  stereotypes  is  related  to  reduced  cognitive 
energy,  increased  cognitive  “misering”,  etc.,  it  can  be  hypothesized  that  state 
suspicion  could  be  reduced  subliminally.  Conversely,  it  might  be  possible  to 
increase  a  user’s  cognitive  activity  and  suspicion  subliminally. 

3,8  Suspicion  Stage  II:  Individual  Difference  Determinants  (Filters,  Inhibitors,  and 
Catalysts) 

Individual  differences  might  also  play  a  major  role  in  increasing,  or  inhibiting,  state-level 
suspicion  (e.g.,  trait  level  propensity  to  be  suspicious  or  generalized  distrust  may  act  as 
catalysts).  We  discuss  the  following  variables  in  our  analysis  and  research  propositions: 

•  A  user 's  trust  in  automation,  which  decreases  the  likelihood  of  suspicion  (via 
cognitive  miser  process) 

•  A  user’s  lack  of  trust  (or  distrust)  in  automation,  which  increases  the 
potential  for  suspicion 

•  Other,  correlated  individual  difference  characteristics  of  the  IT  user,  such  as 
faith  in  humanity,  fatigue,  overall  tendency  to  trust,  or  self-efficacy 

•  Training/rewarding  the  user  to  embrace  uncertainty  and  “be  suspicious” 

We  first  discuss  the  literature  on  trust  and  distrust,  and  then  consider  other  individual  differences 
variables  that  are  likely  to  influence  state-level  suspicion  in  IT  contexts. 

The  role  of  trust  and  distrust;  related  but  conceptually  distinct  concepts.  The  most  cited  article 
on  the  construct  of  interpersonal  trust  in  the  management  literature  is  by  Mayer,  Davis,  and 
Schoorman  (1995).  Trust  is  defined  as  “the  willingness  of  a  party  to  be  vulnerable  to  the  actions 
of  another  party  based  on  the  expectation  that  the  other  will  perform  a  particular  action  important 
to  the  trustor  irrespective  of  the  ability  to  monitor  or  control  that  other  party”  (p.  712).  Note  that 
there  is  an  expectation  involved  in  the  decision  to  trust  someone;  i.e.,  a  substantial  reduction  in 
uncertainty  (see  also  Wang  &  Benbasat,  2008).  In  another  highly  cited  article 
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(McAllister,  1995),  trust  is  also  linked  to  reductions  in  uncertainty.  Indeed,  Colquitt  et  al. 
(2012)  empirically  found  that  both  of  McAllister’s  sub-dimensions  of  trust  were  negatively 
correlated  with  uncertainty  (-.47  and  -.55,  for  affect-based  and  cognition-based  trust, 
respectively). 

From  the  above,  we  suggest  that  trust  involves  a  decision  to  act;  in  contrast,  state  suspieion  is  a 
cognitive  proeess  based  in  part  on  uncertainty.  If  a  deeision  has  already  been  formed, 
uncertainty  is  reduced  and  thus  suspicion  is  reduced.  As  such,  predispositions  to  trust  are 
predispositions  that  remove  uncertainty.  Thus,  predispositions  to  trust  will  inhibit  inereases  in 
state-level  suspicion  by  de-emphasizing  the  pereeption  or  incorporation  of  cues  from  the  IT 
eontext.  The  existing  literature  hints  at  the  above  hypothesis.  For  example,  Lee  and  See  (2004) 
and  McKnight,  Choudhury,  and  Kaemar  (2002)  imply  that  trust,  beeause  it  reduces  uncertainty, 
may  reduce  the  likelihood  of  suspicion.  Buller  and  Bugoon  (1996)  also  imply  that  trust  inhibits 
suspicion,  but  via  a  somewhat  different  perspeetive  -  i.e.,  trust  leads  to  truth  bias  (a  tendency  to 
assume  that  someone  is  truthful,  regardless  of  the  veracity). 

More  speeifically,  if  one  sees  inconsistent  behavior  from  a  trusted  external  agent,  one  is  less 
likely  to  attribute  malintent  to  that  entity  and  is  less  likely  to  engage  in  cognitive  effort  that 
generates  alternative  explanations  for  observed  behavior.  That  is,  trust,  like  stereotypes, 
eeonomizes  cognition  (cf  Gilbert  &  Hixon,  1991;  MacCrae,  Milne,  &  Bodenhausen,  1994; 
Sherman  &  Frost,  2000).  Indeed,  too  mueh  trust  can  lead  to  complacency  (cf.  Ray,  Baker  & 
Plowman,  201 1,  in  management,  or  Bailey  &  Scerbo,  2007,  and  Parasuraman  &  Manzey,  2010, 
in  the  trust  in  automation  literature). 

Regarding  distrust,  there  is  some  minimal  literature  which  explicitly  refers  to  “distrust”  and  the 
notion  that  distrust  also  involves  a  decision.  For  example,  in  soeial  psychology,  Sinaceur  (2010) 
states  that  distrust  is  a  “negative,  unilateral  judgment"  (p.  544).  Or,  in  management  Lewicki, 
McAllister,  and  Bies  (1998)  define  distrust  as  ^''confident  [italies  added  for  emphasis]  negative 
expectations  regarding  another’s  eonduet.”  Although  distrust  thus  implies  a  decision  (about 
intent),  we  propose  that  distrust  ean  indeed  be  a  catalyst  for  state-level  suspieion  —  by  focusing 
one’s  cognitive  activity  on  that  agent’s  uncertain  future  behavior.  Thus,  given  distrust,  the 
emergenee  of  suspicion  is  not  focused  on  the  (mal)intent  of  the  external  agent,  but  is  focused  on 
eognitive  activity  and  uncertainty  regarding  the  agent’s  unknown  behavior  (and  possible 
safeguards  against  that  behavior). 


Although  the  articles  by  Mayer  and  McAllister,  and  their  focus  on  interpersonal  trust,  continue  to  dominate 
management  and  applied  psychology,  other  researchers  suggest  that  trust  can  occur  at  many  levels  and  with  many 
different  types  of  agents  (cf  Lee  &  See,  2004).  That  is,  trust  is  also  considered  to  occur  within/between  virtual 
teams  or  virtual  communities  (e.g.,  Jarvenpaa  &  Leidner,  1999;  Ridings,  Gefen,  &  Arinze,  2002),  countries  (e.g., 
Hoffman,  2007),  internet  websites  (e.g.,  McKnight,  Kaemar,  &  Choudhury,  2004),  automated  decision  aids  (e.g., 
Huhns  &  Buell,  2002;  Lyons  et  al.,  201 1),  and  new  technology  (e.g.,  Li,  Hess,  &  Valacich, 

2008). 
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For  completeness,  we  note  that  the  ambivalent  feeling  of  “neither  trust  nor  distrust”  could  lead  to 
both  kinds  of  cognitive  engagement  associated  with  state-level  suspicion  -  activity  focused  on 
uncertainty  about  the  agent’s  motives  a^  the  agent’s  possible  future  aetions.  In  sum,  our  Stage 
II  propositions  about  the  role  of  trust  and  distrust  are; 

•  Proposition  II.  1:  In  the  face  of  anomalies  in  the  system,  relatively  high  levels  of 

user  trust  act  as  an  inhibitor  to  increases  in  state  suspicion.  In  contrast,  distrust 
leads  to  eognitive  engagement  assoeiated  with  suspicion,  but  only  for  cognitive 
activity  regarding  possible  alternative  future  aetions  of  the  external  agent,  and  not 
the  direction  of  the  (mal)intent.  Further,  individual  users  who  neither  trust  nor 
distrust  external  agents  will,  in  the  face  of  anomalies,  engage  in  both  types  of 
cognitive  activity  associated  with  state  suspieion  -  eognitive  aetivity  foeused  on 
the  agent’s  possible  intent  and  eognitive  activity  focused  on  the  agent’s  possible 
future  actions. 

Other  individual  difference  antecedents  of  state-level  suspicion.  Given  our  definition  of 
suspicion,  we  hypothesize  several  other  individual  difference  variables  (ereativity,  need  for 
cognition,  intelligence)  that  are  likely  to  be  empirieally  correlated  with  levels  of  state  suspicion. 

First,  it  is  suggested  that  creative  individuals  will  be  better  able  to  be  suspieious.  Griffin  and 
Moorhead  (2010)  define  creativity  as  the  “ability  to  generate  new  ideas  or  to  coneeive  of  new 
perspectives  on  existing  ideas”  (p.  210),  and  tests  of  ereativity  even  include  the  “alternative  uses 
test”  (see  Lissitz  &  Willhoft,  1985).  Thus,  given  that  state  suspicion  involves  generating 
alternative  explanations,  we  suggest  that  the  eapacity  to  be  suspicious  is  conceptually  linked  to 
individual  levels  of  creativity. 

Seeond,  work  by  Echebarria-Echabe  (2010)  suggests  that  the  “need  for  eognition”  may  increase 
levels  of  suspicion,  because  sueh  individuals  are  “more  willing  to  engage  in  systematic 
processing”  (p.  156).  Eor  example,  Caeioppo  and  Petty  (1982)  developed  a  need  for  cognition 
scale  whieh  includes  items  such  as  “I  would  prefer  complex  to  simple  problems.”  We 
hypothesize  that  the  need  for  cognition  will  be  positively  related  to  inereased  levels  of  suspicion 
due  to  the  cognitive  activity  component  of  suspicion.  In  contrast,  individuals  low  on  need  for 
cognition  may  be  motivated  to  take  things  at  face  value.  Such  a  notion  (related  to  the  coneept  of 
“cognitive  misers”)  appears  in  the  social  psychology  (Priester  &  Petty,  1995)  and  human  factors 
(cf.  Parasuraman  &  Manzey,  2010,  citing  Wickens  &  Hollands,  2000)  literatures. 

Third,  in  regard  to  task  performance  in  suspicious  contexts  (e.g.,  the  deteetion  of  deeeption),  we 
hypothesize  that  individuals  who  are  high  on  measures  of  general  intelligence  (i.e.,  have  higher 
eognitive  capaeity,  “g”)  are  more  eapable  of  performing  in  environments  that  require  increased 
state  suspieion.  Given  the  above  cognitive  nature  of  suspieion  (coding/acquisition  of  information 
in  the  eontext  of  uncertainty;  generating  alternative  explanations)  suspicious  individuals  are 
cognitively  busy.  As  Vonk  (1998)  demonstrated,  suspieious  individuals  proeess  ineoming 
information  less  quickly.  In  turn,  high-g  individuals  will  be  better  able  (than  low-g  individuals) 
to  deteet  deeeption  anfi  function  on  other  tasks  while  engaging  in  suspicious  thoughts. 

As  noted  earlier,  there  was  little  mention  of  the  construct  of  suspicion  in  the  human  factors 
literature  (exceptions  being  Eyons  et  ah,  201 1,  and  Parasuraman  &  Riley,  1997). 
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However,  we  borrow  from  the  extensive  trust  in  automation  literature  to  suggest  yet 
other  individual  differenee  factors  in  Stage  II  of  our  model.  That  literature  suggests: 

•  Experience  and  familiarity  with  the  technology  (Lee  &  See,  2004;  Lyons  et  ah, 
2011;  see  also  Potosky  &  Bobko,  1998,  or  Potosky,  2007  for  scales  that  assess 
computing  experience  ) 

•  Laith  in  humanity  (Li  et  ah,  2008) 

•  Tendency  to  take  a  trusting  stance  and  general  levels  of  trust  (Li  et  ah,  2008; 
Ridings,  Gefen,  &  Arinze,  2002) 

•  Conformity,  inclination  to  use  stereotypes,  general  negative  affect,  and  cynicism 
(Bobko,  2012;  Gefen  et  ah,  2008) 

•  Self-efficacy  and  competence  (“user  accuracy”)  (Parasuraman  &  Miller,  2004; 
Parasuraman  &  Riley,  1997) 

•  Cost-benefit  calculation  by  the  user  (Li  et  ah,  2008;  Wang  &  Benbasat,  2008) 

•  Workload  and  fatigue  (Parasuraman  &  Riley,  1997). 

Lor  example,  to  the  extent  that  faith  in  humanity  or  self-efficacy  regarding  technology  are 
positively  related  to  trust  propensity,  then  these  factors  are  likely  to  influence  suspicion  at  Stage 
II  (see  also  Parasuraman  &  Riley,  1997).  Other  dispositions  that  might  be  associated  with 
reduced  state-level  suspicion,  all  else  equal,  include  conformity  or  tendency  to  use  stereotypes 
(Bobko,  2012)  or  other  personality  traits  (Gefen  et  ah,  2008).  Still  other  characteristics  of  the 
user  might  be  more  situation  specific,  and  include  perceptions  of  individual  workload 
(Parasuraman  &  Riley,  1997)  or  familiarity  with  the  particular  technology  (Lee  &  See,  2004). 
We  offer  the  following  propositions  regarding  Stage  II  in  our  model: 

•  Proposition  II. 2:  Individual  differences  across  users  will  influence  levels  of  IT 
state-  level  suspicion.  Specifically,  levels  of  suspicion  will  be  increased  when  the 
user  (1)  lacks  familiarity  with  similar  systems,  (2)  has  had  some  unexpected 
negative  experiences  with  similar  systems,  (3)  lacks  faith  in  humanity,  (4)  tends  to 
take  cynical  stances,  (5)  lacks  self-efficacy  and  perceived  individual  competence, 
(6)  has  a  minimal  routine  workload,  and  (7)  has  a  high  need  for  cognition. 
Conversely,  inhibitors  to  increased  levels  of  IT  state-level  suspicion  include  (1) 
positive  experiences  and  familiarity  with  similar  systems,  (2)  faith  in  humanity,  (3) 
tendency  to  take  a  trusting  stance  and  general  disposition  to  trust,  (4)  self-efficacy 
and  perceived  personal  competence,  and  (5)  high  workload  and/or  fatigue. 

•  Proposition  II.2a  :  Individual  differences  across  users  will  also  influence  the 
detection  of  anomalies  during  suspicious  conditions.  Specifically,  increased 
detection  success  will  be  associated  with  increased  user  (a)  intelligence  (i.e., 
general  cognitive  ability)  and  (b)  creativity. 

•  Proposition  II. 3:  The  individual  differences  in  Proposition  II  and  the  situational 
characteristics  in  Proposition  I  will  combine  in  an  interactive  manner  (cf.  Bobko, 
2001)  to  predict  levels  of  state  suspicion.  Lor  example,  consider  the  individual 
difference  variable  of  “experience  with  similar  systems”  and  the  situational 
characteristic  of  “correspondence  between  visual  interface  and  simulated 
environment.”  The  state-level  suspicion  of  highly  experienced  operators  (e.g., 
expert  operators)  will  be  increased  by  relatively  small  discrepancies  between 
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interfaces  and  simulated  environments.  In  contrast,  inexperienced  users  will 
require  larger  discrepancies  before  their  state-level  suspicion  is  increased. 

3.9  Suspicion  Stage  III:  Immediate  Derivatives  and  Outcomes 

Our  definition  and  analysis  of  state-level  IT  suspicion  suggested  that  when  one  is  in  a  suspicious 
state  (Stage  III),  cognitive  activity/load  is  increased.  During  this  stage,  the  user’s  cognitive 
activity  is  a  central  (but,  as  noted,  not  sufficient)  component  of  state-level  suspicion.  Such 
cognitive  activity  occurs  because  the  suspicious  observer  is  engaged  in  (1)  looking  for  alternative 
“pieces”  of  information,  as  well  as  (2)  generating  alternative  explanations  for  observed  behavior. 
In  an  empirical  confirmation  of  this  increased  cognitive  processing,  Vonk  (1998)  demonstrated 
that  suspicious  subjects  took  longer  to  read  textual  stimuli  than  less  suspicious  subjects  (see  also 
Buller  &  Burgoon,  1996).  Conversely,  Parasuraman  and  Manzey  (2010,  citing  Weiner)  note  the 
link  between  complacency  (and  lower  cognitive  load)  and  a  lack  of  suspicion.  Indeed,  recent 
neurologically  based  studies  indicate  that  suspicion  involves  substantial  cognition  (cf  Dimoka, 
2010). 

We  suggest  that  state  suspicion  at  Stage  III  is  also  associated  with  emotional  reactions  -  but  they 
would  be  reactions  of  anxiety  and  fear  (given  the  uncertainty  component),  whereas  distrust  might 
be  associated  with  reactions  of  anger  (about  a  negative  event  and  its  causal  agent).  We  note  these 
immediate  outcomes  in  our  model.  Indeed,  Huddy  and  Feldman’s  (2011)  analysis  of  reactions  to 
the  events  of  9/1 1/01  suggest  that,  in  negative  situations,  anxiety  was  linked  to  uncertainty 
whereas  anger  was  linked  to  certainty.  In  yet  another  context  (political  doves  versus  hawks),  a 
similar  suggestion  was  made  in  Mahoney’s  (2011)  analysis  of  the  Cuban  missile  crisis  in  the 
1960s.  Mahoney  states  that  the  hawk’s  view  of  the  crisis  was  “predictable”  and  “controllable,” 
whereas  the  dove’s  view  of  the  crisis  was,  among  other  things,  “unpredictable.”  The  doves  thus 
felt  “enormous  anxiety  throughout,  while  the  hawks  felt  virtually  none”  (p.  204).  Our  research 
propositions  for  immediate,  psychological  consequences  of  Stage  III  are: 

•  Proposition  III.  I :  As  individual  users  become  more  suspicious,  their  cognitive 

load  will  increase  (and  markers  of  cognitive  load  such  as  working  memory  or 
speed  of  processing  will  decrease).  Further,  as  state  suspicion  increases,  the 
(mal)intent  and  uncertainty  facets  will  result  in  increased  emotional  arousal 
(characterized  by  fear  and  anxiety  rather  than  by  anger). 

In  regard  to  hypotheses  about  neurological  indicators  of  state-level  suspicion,  Watabe,  Ban,  and 
Yamamoto  (2011)  note  that  it  is  difficult  to  identify  specific  decision-making  processes  based 
upon  differential  brain  activation,  given  the  interconnectedness  of  the  influence  of  brain  regions. 
Nonetheless,  we  draw  some  tentative  research  propositions  about  the  identification  and 
measurement  of  IT  induced  state-level  suspicion. 

It  was  noted  earlier  that  one  potential  cause  of  state-level  suspicion  was  a  discrepancy  between 
what  one  expects  and  what  one  observes.  Such  a  discrepancy  could  lead  to  cognitive  activity 
dedicated  to  searching  for  explanations  of  the  discrepancy,  causing  increased  uncertainty, 
decreased  trust,  etc.  Oliveira,  McDonald,  and  Goodman  (2007)  conducted  two  EEG  studies 
based  on  the  assumption  that  the  anterior  cingulated  cortex  (ACC)  in  the  brain  is  involved  in  (i) 
error  detection  or  (ii)  evaluation  of  poor  performance  (cf.  also  Hajcak,  McDonald,  &  Simmons, 
2004).  Note  that  error  recognition  and  performance  evaluation  are  two  representations  of 
increased  cognitive  activity.  Eurther,  Oliveira  et  al.  found  that  ACC  activity  occurs  for 
unexpected  rewards,  as  well  as  increases  in  rewards.  This  converges  with  our  “uncertainty” 
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facet  of  suspicion  (whether  positive  or  negative).  Oliveira  et  al.  also  suggested  that  the  ACC 
aets  as  a  system  whieh  signals  an  inereased  need  for  eognitive  eontrol,  an  updating  of  one’s 
internal  models,  and  inereased  use  of  external  information.  These  proeesses  all  direetly  refleet 
the  inereased  aetive  eognition  faeet  of  our  definition  of  state-level  suspieion.  Thus,  we  suggest: 

•  Proposition  III. 2:  Inereased  levels  of  IT  suspieion  will  be  assoeiated  with 
increased  anterior  eingulate  eortex  aetivity. 

Regarding  emotion  and  the  neurologieal  literature,  Hajeak  et  al.  (2004)  found  that  if  an 
individual’s  uneertainty  was  perceived  to  have  potentially  negative  eonsequenees  (whieh  reflects 
our  focus  on  malintent  in  IT  contexts),  then  anxiety  would  be  inereased  due  to  the  interaetion  of 
potential  negativity  and  hyper-arousal  (eognitive  aetivity).  This  links  with  our  suggestion  that 
suspieion  will  be  assoeiated  with  increased  anxiety  (rather  than,  say,  inereased  anger).  However, 
one  moderator  to  the  above  hypothesis  might  involve  mood  of  the  IT  user.  That  is,  Hajaek  et  al. 
(2004)  found  that  negative  affeet/mood  inereased  error-related  negativity  (ERN),  while  redueing 
an  error  positivity  (Pe)  measure.  In  other  words,  partieipants  who  were  relatively  high  in 
negative  affeetivity  noticed  errors  more  strongly,  but  they  were  also  less  likely  to  eognitively 
proeess  those  errors  and/or  update  any  mental  models  about  what  was  happening. 

Stiekney  (2009;  eiting  Schwartz,  2000)  also  notes  that  mood  influences  deeision  making 
strategy;  i.e.,  a  sad  mood  leads  to  more  attention  to  detail  and  less  reliance  on  pre-existing 
strategies,  whereas  a  positive  mood  is  linked  to  greater  use  of  heuristics.  This  implies  that 
negative  mood  is  more  strongly  related  to  suspieion  than  is  positive  mood,  given  the  proeess  of 
generating  alternative  explanations  when  suspieious.  Thus,  we  suggest: 

•  Proposition  III. 3:  Individuals  who  are  experiencing  a  negative  mood  (due  to  long¬ 
term  trait  or  shorter  term  situational  reasons),  will  be  more  likely  to  beeome 
suspieious  than  positive  mood  individuals. 

Going  a  step  further,  we  note  that  other  researchers  (e.g.,  Marsland  et  ah,  2006)  state  that 
negative  affeet  is  assoeiated  with  right-sided  prefrontal  brain  aetivity  and  positive  affeet  is 
assoeiated  with  left-sided  prefrontal  aetivity.  Interestingly,  this  eonverges  with  reeent  work  in 
the  management  literature  (Waldman,  Balthazard,  &  Peterson,  201 1)  on  the  link  between 
neuroscienee  and  “inspirational  leadership.”  These  authors  note  that  right  frontal  brain 
dysfunetion  is  assoeiated  with  diffieulties  in  dealing  with  uneertainty.  Given  that  uneertainty  is 
a  faeet  of  suspieion,  we  might  suggest  that  researehers  also  look  for  assoeiations  between  right¬ 
sided  prefrontal  aetivity  and  inereased  levels  of  suspieion.  However,  another  facet  of  suspieion 
is  inereased  eognitive  aetivity,  whieh  would  inerease  aetivation  in  both  sides  of  the  brain. 

Henee  we  refrain  from  any  speeifie  propositions  in  this  regard. 

Further,  researchers  eonducting  “theory  of  mind”  (ToM;  Premaek  &  Woodruff,  1978)  studies 
have  found  that  the  anterior  paraeingulate  eortex  is  aetivated  when  partieipants  are  deeiding 
whether  or  not  to  cooperate  with,  or  trust,  someone  else  (e.g.,  Gallagher  &  Frith,  2003).  That 
is,  higher  brain  activation  in  the  anterior  paraeingulate  eortex  has  been  assoeiated  with  the 
eognitively  demanding  proeess  by  whieh  a  person  infers  whether  or  not  another  person  is 
trustworthy.  Sueh  aetivation  is  eonsistent  with  the  findings  of  Dimoka  (2010),  Gefen  et  al. 
(2008),  and  Kreuger  et  al.  (2007).  However,  Dimoka  additionally  found  that  subjeets  who  were 
given  ambiguous  information  (i.e.,  subjects  in  the  eondition  of  no  trusting  information  and  no 
distrusting  information)  were  also  prone  to  inereases  in  anterior  paraeingulate  eortex  aetivity. 
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We  suggest  this  is  beeause  the  ambiguous  information  eould  breed  suspieion  whieh,  in  turn, 
would  also  lead  to  inereased  eognitive  aetivity.  This  more  general  link  between  eognitive 
aetivity  and  anterior  paraeingulate  eortex  aetivity  (whether  via  a  deeision  proeess  about  trust  or 
due  to  informational  ambiguity)  is  eonsistent  with  the  theory  of  mind.  Thus,  we  suggest: 

•  Proposition  III. 4:  Inereases  in  paraeingulate  eortex  aetivity  will  be  assoeiated  with 
(i)  individuals  in  the  proeess  of  making  deeisions  about  trust  (or  distrust)  or  (ii) 
individuals  who  are  reeeiving  ambiguous  information.  Conversely,  deereases  in 
paraeingulate  eortex  aetivity  will  be  assoeiated  with  individuals  who  have  made 
deeisions  about  trust  (or  distrust),  beeause  these  individuals  invoke  eognitive 
heuristies  to  quiekly  and  effieiently  proeess  future  information. 

Regarding  more  distal  outeomes,  to  the  extent  that  state-level  suspieion  induees  fear  and  anxiety, 
then  suspieion  will  be  assoeiated  with  indieators  of  arousal,  sueh  as  inereased  blood  pressure  and 
eleetrodermal  aetivity  (EDA).  If  the  suspieion,  and  assoeiated  stress,  is  sustained  aeross  time 
then  long-term  outeomes  might  be  inereased  suseeptibility  to  eolds  or  even  inereased  likelihood 
of  eoronary  heart  disease  (Friedman  &  Ulmer,  1984;  Myers,  2010). 

We  also  suggest  that  an  inerease  in  state-level  suspieion  will  be  assoeiated  with  an  inereased 
ability  to  eorreetly  deteet  deeeption.  Consistent  with  our  propositions  about  individual 
differenees,  it  is  further  hypothesized  that  deteetion  of  deeeption  is  also  enhaneed  by  inereased 
levels  of  individual  eognitive  ability  and/or  ereativity  (beeause  these  individual  differenee 
faetors  enhanee  one’s  eapaeity  to  generate  alternative  possibilities  and  be  suspieious).  Note  also 
that  the  above  suggestions  assume  that  there  is  some  deeeption  to  be  deteeted.  This  leads  to: 

•  Exploratory  researeh  question  III.  I  (warranted  suspieion):  Are  there  appropriate  levels 
of  suspieion,  and  what  is  the  nature  of  the  relationship  between  levels  of  suspieion  and 
sueeessful  deteetion  of  deeeption?  Presumably,  sueh  a  relationship  is  eurvilinear.  That 
is,  as  suspieion  inereases,  deteetion  of  suspieious  events  inereases,  but  at  a  partieular 
point  generalized  suspieion  is  unwarranted  (Parasuraman  &  Riley,  1997,  diseuss  the 
use,  abuse,  disuse,  and  misuse  of  automated  systems  and  the  phrase  “unwarranted 
suspieion”).  If  some  individuals  are  pre-disposed  to  be  suspieious  (see  Table  2),  then 
they  are  pre-  disposed  to  spend  eognitive  energy  generating  alternative  possibilities. 

Will  this  expenditure  of  eognitive  resourees  then  reduee  their  eapaeity  to  sometimes 
“see  the  obvious”? 

3.10  Summary 

One  purpose  of  the  eurrent  review  was  to  eonduet  a  multi-diseiplinary  review  of  the  (minimal) 
researeh  on  suspieion  -  with  a  speeifie  foeus  on  IT  indueed,  state-level  suspieion.  The  few 
existing  articles  from  each  of  several  social  science  domains  were  considered,  and 
inconsistencies/consistencies  were  noted.  The  integrative  definition  of  suspicion  has  the  key 
components  of  “uncertainty,”  “cognitive  activity,”  and  “(mal)intent.”  In  particular,  we  defined 
IT  state-level  suspicion  as  a  person’s  simultaneous  state  of  cognitive  activity,  uncertainty  and 
perceived  malintent  about  underlying  information  that  is  being  electronically  generated,  collated, 
sent,  analyzed,  or  implemented  by  an  external  agent. 

A  three-stage,  heuristic  model  of  suspicion  was  developed,  aided  by  other,  related  literatures 
regarding  the  concepts  of  trust  (in  general)  and  trust-in-automation  (in  particular).  This  led  to 
several  research  propositions  and  exploratory  questions  about  the  concept  of  IT-induced,  state- 
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level  suspicion  at  each  of  the  three  stages.  We  believe  that  attention  to  a  common  definition  of 
suspicion,  and  research  on  the  above  propositions/questions,  will  assist  both  academicians  and 
practitioners  who  desire  to  embrace  the  notion  of  suspicion  in  technologically  enhanced  contexts. 

Other  efforts  might  readily  follow  beyond  those  listed  in  this  review.  For  example,  use  of  a 
theoretically-based,  uniform  definition  of  “state-level  suspicion”  by  different  social  scientists 
could  lead  to  a  more  reliable  and  valid  measure  of  suspicion.  Self-report  items  could  be 
developed  (particularly  about  the  interactive  facets  of  uncertainty,  cognition,  and  intent),  as  well 
as  physiological  and  neurological  measures.  To  further  assess  construct  validity,  the  self-report 
measures  could  be  triangulated  with  neurological  measures  (paralleling  Hancock  et  al.’s,  2011, 
call  for  assessments  of  measurement  convergence  in  the  human-robot  interaction  literature). 

Measurement  items  might  also  be  categorized  as  assessing  the  ability  to  be  suspicious  (e.g., 
capacity  to  generate  alternative  explanations;  capacity  to  recognize  relevant  cues,  capacity  to 
accurately  detect  deception)  or  the  motivation  to  be  suspicious  (i.e.,  attentiveness  to  cues  across 
time).  These  two  types  of  criteria  match  the  usual  “can  do”  and  “will  do”  distinction  in  studies  on 
job  performance  in  management  and  applied  psychology  (Borman,  White,  Pulakos,  &  Oppler, 
1991). 

Given  this  uniformly  accepted  definition/measure  of  suspicion,  the  nomological  net  of  correlates 
discussed  earlier  could  be  empirically  investigated  in  order  to  further  enhance  the  understanding 
of  suspicion.  Several  possible  correlates  were  noted  in  our  discussion  of  Stage  II  (e.g., 
intelligence,  creativity,  need  for  cognition,  disposition  to  trust,  cynicism).  As  suggested  by 
others  (Bond  &  Lee,  2005;  Levine  &  McComack,  1991)  it  is  also  useful  to  distinguish  between 
“trait”  and  “state”  suspicion.  That  is,  it  may  be  that  some  individuals  are  predisposed  to  be 
suspicious  (cf.  the  suggested  correlate  of  “faith  in  humanity”).  On  the  other  hand,  our  focus  has 
been  on  “suspicion”  as  a  transient  state  that  is  dependent  on  IT-induced  situational  factors.  For 
example,  we  noted  a  variety  of  system/machine  characteristics  that  could  influence  levels  of  state 
suspicion.  Benbasat,  Gefen,  and  Pavlou  (2008)  noted  a  variety  of  moderators  of  user  trust  in  IT 
systems,  which  might  also  apply  to  research  on  IT  suspicion  (e.g.,  moderators  such  as  gender  and 
culture).  Indeed,  one  of  the  primary  dimensions  of  globally-based  culture  is  labeled  “uncertainty 
avoidance”  (Hofstede  &  Bond,  1988,  p.  1 1),  which  involves  relative  discomfort  in  unstructured, 
unknown,  or  surprising  situations.  Thus,  individuals  from  such  cultures  may  be  less  likely  to 
engage  in  suspicious  behaviors,  as  they  have  a  desire  to  avoid  the  “uncertainty”  component  in 
our  definition  of  suspicion. 

Further,  if  suspicion  can  indeed  be  influenced,  and  if  suspicion  is  both  an  ability  (can  do)  and 
attitude  (will  do),  suspicion  might  be  trained  via  programs  involving  attitude  formation  and 
training.  Attitudes  are  considered  to  have  three  components  -  cognitive,  affective,  and 
behavioral  intent  (e.g.,  Griffin  &  Moorhead,  2010)  -  and  the  first  two  attitudinal  components 
mirror  the  active  cognition  facet  of  suspicion  and  the  arousal/anxiety  outcomes  discussed  above. 

“Suspicion  training”  might  also  be  informed  by  the  IT  literature.  For  example,  it  has  been 
suggested  that  operator  performance  is  readily  infiuenced/enhanced  by  requiring  the  operator  to 
occasionally  shift  from  automated  to  manual  modes  (e.g.,  Chen,  Barnes,  &  Harper-Sciarini, 

2010;  Lee  &  See,  2004;  Parasurman  &  Manzey,  2010,  citing  work  by  Gopher  and  work  by 
Metzger).  Therefore,  the  active  cognition  component  of  suspicion  may  be  enhanced  by  having 
users  occasionally  switch  modes  (of  information  acquisition  or  responding)  rather  than  succumb 
to  complacency  via  continued  use  of  a  single  channel.  As  another  example,  the  US  Army  has 
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adopted  a  program,  based  on  positive  psychology,  which  builds  soldier  resilience  by  training 
those  individuals  to  avoid  worst-scenario  thinking  (see  Cornum,  Matthews,  &  Seligman,  2011, 
for  an  overview  of  this  program).  It  is  interesting  to  speculate  whether  or  not  suspicion  training 
(particularly  raising  cognitive  awareness  and  motivation  to  consider  the  possibility  of  malintent) 
might  be  counter  to  such  a  program. 

In  addition,  the  focus  of  the  current  review  has  been  on  the  “receiver”;  i.e.,  the  focus  has  been  on 
the  person  who  might  be  suspicious,  what  that  person’s  characteristics  might  be,  and  how  that 
person  might  react  to,  or  process  information  from,  situational  cues,  etc.  A  different  set  of 
research  activities  might  focus  on  behaviors  and  attributes  of  the  person/entity  who  is  attempting 
the  deception.  We  imagine  several  parallel  processes;  e.g.,  increased  cognitive  load  for  the 
“deceiver”  (external  agent).  For  example,  in  the  law  enforcement  literature,  a  variety  of  studies 
indicates  that  being  deceptive  is  more  cognitively  demanding  than  being  truthful  (for  a  review, 
see  Patterson,  2009,  who  also  notes  that  behavioral  indicators  of  increased  load  include  reduced 
eye  blinks  and  reduced  excess  body  movement).  Or,  in  applied  psychology,  both  Ziegler  (2011) 
and  van  Hooft  and  Born  (2012)  used  eye-tracking  measures  to  assess  the  cognitive  load  of 
individuals  who  were  trying  to  fake  on  self-report  personality  tests. 

Finally,  as  noted  in  one  of  our  research  questions,  research  on  the  use  of  subliminal  information 
might  be  particularly  promising.  Such  research  has  existed  for  decades  in  marketing,  but  seems 
to  be  readily  linked  to  IT  contexts  (e.g.,  individuals  working  at  computer  displays). 

For  example,  we  noted  that  MacCrae  et  al.  (1994)  found  that  stereotypes  could  be  subliminally 
induced,  and  such  stereotypes  were  associated  with  cognitive  relaxation  (in  contrast  to  increased 
cognitive  activity).  It  would  be  interesting  to  see  if  state  suspicion  could  be  subliminally  induced 
or  reduced  (and  what  ways  were  most  effective  in  doing  so).  For  example,  experiments  could  be 
conducted  that  subliminally  manipulated  factors  such  as  perceptions  of  fatigue,  system  accuracy, 
history  of  prior  distrusting  experiences,  etc.  in  order  to  see  influences  on  suspicion. 

In  summary,  the  potential  for  research  on  suspicion,  and  IT  state  suspicion,  is  vast  and  has 
important  implications.  We  hope  the  integrative  review,  definition,  process,  and  propositions 
assist  future  researchers  in  this  domain.  We  look  forward  to  the  results  that  such  research  will 
bring. 

3,11  Key  Points 

•  There  is  little  in  the  human  factors  literature  on  the  important  topic  of  suspicion. 

•  We  develop  a  definition  and  integrative  model  of  IT  induced,  state-level  suspicion 
based  upon  work  in  communication,  psychology,  human  factors,  management, 
marketing,  information  technology,  and  neuropsychology. 

•  The  definition  of  state  suspicion  is  the  simultaneous  occurrence  of  (a)  uncertainty, 
(b)  increased  cognitive  processing  (e.g.,  generation  of  alternative  explanations  for 
perceived  discrepancies),  and  (c)  perceptions  of  malintent. 

•  Research  propositions  within  IT  contexts  are  derived  at  each  of  three  stages  in  our 
model  of  suspicion. 
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LIST  OF  ACRONYMS 


ACC 

Anterior  Cingulated  Cortex 

AFOSR 

Air  Eoree  Offiee  of  Scientific 
Research 

CA 

Cognitive  Activity 

EDA 

Electrodermal  Activity 

ERN 

Error-Related  Negativity 

IT 

Information  Technology 

MI 

Mal-Intent 

Pe 

Error  Positivity 

Un 

Uncertainty 
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